Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144882.roa
File: AS144882.roa (raw, json)
Hash identifier: APuj5pLINfV8eDV/YkLEUqT87AkqSCFB7xTC5StpOng=
Subject key identifier: 5A:52:C1:F2:1D:E7:EA:16:A2:57:8E:F9:C8:20:FC:58:85:A8:1B:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C7A6783BCF9C2B6897F47E23EEBAB6392263D59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144882.roa
Signing time: Fri 22 May 2026 04:08:25 +0000
ROA not before: Fri 22 May 2026 04:03:25 +0000
ROA not after: Fri 21 May 2027 04:08:25 +0000
asID: 144882
IP address blocks: 240a:a8b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7a:67:83:bc:f9:c2:b6:89:7f:47:e2:3e:eb:ab:63:92:26:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:25 2026 GMT
Not After : May 21 04:08:25 2027 GMT
Subject: CN=5A52C1F21DE7EA16A2578EF9C820FC5885A81B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:7c:dd:e9:80:a9:ee:29:57:bd:79:45:f6:
a7:a8:e5:de:48:87:2a:a6:08:f1:99:84:ba:52:36:
28:21:d1:5b:78:b8:a7:a0:47:99:3e:8e:6f:01:7d:
a7:f1:ab:52:84:56:35:2d:d0:bb:3f:92:64:da:bd:
01:ee:b0:16:b6:6e:aa:04:08:54:a5:20:74:cf:df:
ff:86:aa:81:a0:db:7a:21:25:b8:e3:8d:4b:72:a6:
ed:a5:d4:33:bb:82:e9:2e:1c:0b:b2:6d:93:5f:fc:
d3:ca:f3:72:a4:d0:31:b1:f4:37:c5:05:ae:90:5e:
79:d3:44:bb:48:82:bb:84:ae:fa:79:cc:24:69:1f:
a0:a3:76:24:24:60:fb:b5:95:55:d2:df:db:df:ac:
8c:d6:76:f6:cf:5c:01:e1:21:08:02:4e:5f:bc:5c:
70:3a:62:62:4b:93:bf:26:b5:9b:f3:92:a9:f6:b2:
5f:c4:7a:21:c1:fa:da:a5:2c:c4:70:fa:e0:62:4d:
9b:a6:c7:28:bb:87:19:37:f4:8a:62:b9:48:fa:5f:
70:18:96:74:8e:e5:fe:97:9b:a4:fa:a0:a2:20:09:
54:57:12:73:a3:77:4a:19:68:13:52:bf:4f:40:12:
ea:69:05:cb:cf:ac:d2:68:95:fa:8f:91:cc:f5:f8:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:C1:F2:1D:E7:EA:16:A2:57:8E:F9:C8:20:FC:58:85:A8:1B:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a8b8::/32
Signature Algorithm: sha256WithRSAEncryption
1f:43:d7:63:89:19:c6:a8:56:b8:c6:10:ed:5a:ae:d4:67:e8:
e5:34:99:f0:35:01:d4:ab:61:9a:71:08:62:1a:2a:2a:64:97:
27:cd:f5:6f:e0:40:dc:cc:43:1c:b0:ef:42:a8:fa:86:24:5f:
ef:5c:9e:aa:3a:7d:41:cf:9e:28:51:af:8a:35:49:1e:54:30:
0d:ef:8c:5e:51:2b:6f:6b:32:9c:12:ca:7e:00:63:33:4b:87:
3c:dc:36:0b:42:db:90:3f:e4:f0:a7:fb:fc:7a:0b:19:8c:60:
83:18:06:94:14:b0:a8:27:8a:3b:a8:57:45:5b:3b:dc:cc:21:
b4:c0:37:31:ab:e6:f4:b5:f4:2a:8d:8a:e4:32:11:72:a0:26:
b8:a3:71:d7:10:be:7c:d6:87:b4:f0:3f:6f:fb:a5:52:ed:c7:
37:b9:97:14:15:c6:cf:2c:7a:1a:d1:09:9b:c1:21:1b:21:1e:
ca:7a:ab:00:48:af:33:1a:a2:0c:27:c6:81:2e:02:45:4d:3c:
32:6b:07:02:5f:b2:a3:b1:5d:1c:08:5e:f7:c5:81:a3:32:61:
fb:75:80:41:31:81:34:75:48:e1:cc:0d:3c:63:83:c0:60:6b:
00:25:1c:6a:ad:5c:43:c9:d7:c7:2c:d2:37:ef:d0:7c:f2:71:
cf:a1:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client